Re: cleaning a computer

On Thu, 5 Jan 2006 10:51:04 -0800, "John R Weiss"
>"Will Denny" <willdenny@xxxxxxxx> wrote...

>> Backing up data files shouldn't be a problem as they normally would not be
>> infected. And can then be used after the reinstall.

It doesn't help that MS duhfaults to dumping incoming downloads (.EXE
included) in "My Docs", locating IM attachments in there, plus storing
some data elsewhere (Application Data vs. Local Settings\Application
Data, etc.). If you backup your email stores, you'll include any
malware hidden in there as well.

So there's a significant risk of restoring malware with your "data"
backup, even when you consider...

>There are numerous viruses/trojans that can infect MS Office files

....MS's blurring of the data distinction, both by design (MS Office,
WMF) and by code defect (JPG).

Yes, there are patches for most code defects... which you won't have
in place after you "just" wipe and re-install, so... guess the rest.

>> The only sure fire way to get rid of viruses is to perform a low level
>> reformat - can be fraught with all kinds of problems though.

Of course - it's as destructive as the malware could be (financial
effects aside) and your system is likely to be infected again, given
all patches are lost, av won't be updated, etc.

>The best he can do on his own is a HD "wipe" using an appropriate
>app on an antivirus-protected machine, followed by a repartition/reformat.

Bad advice, especially for anyone with pre-SP2 XP.

The skills you need to rebuild and protect a system from scratch are
similar in magnatude to cleaning off malware, in such cases. MS
doesn't see the need to give you the tools either way; installing an
SP does not generate updated installation media, and MS provides no
maintenance OS for XP. It's up to you to find out how to slipstream
SPs and build new OS CDR and harness Bart PE CDR, respectively.

There ARE no easy answers to tough malware!


>---------- ----- ---- --- -- - - - -
Don't pay malware vendors - boycott Sony
>---------- ----- ---- --- -- - - - -
.

Relevant Pages

  • @@ Nasty computer worm devours files today (February 3, 2006) @@
    ... The email doesn't have to be opened to infect a system -- it spreads by itself ... This worm has been given a 'moderate' threat rating by Microsoft. ... Microsoft wants to make customers aware of the Mywife mass mailing malware variant ... Customers using Windows XP Service Pack 1, Windows XP Service Pack 2, Windows Server ...
    (soc.culture.iranian)
  • Re: Strange behaviour - some text and e-mails disappeared
    ... seed the data set with malware, ... infect off-board storage and LAN systems ... the capability of getting through a hardware firewall by deception ...
    (microsoft.public.security.virus)
  • OT: IFRAME exploit was: Re: Goodbye to copper? [Telecom]
    ... it turned out the content was placed there by malware that slipped ... to infect web sites (mostly with the IFRAME exploit which uses long- ... I'm not aware of similar plugins for other browsers, ...
    (comp.dcom.telecom)
  • Re: Virus Acquisition
    ... Actually, even without knowing anything about viruses, it would be ... monitor proper virus removal. ... Find whatever virus or other malware you want to infect the computer ...
    (microsoft.public.windowsxp.general)
  • Re: Virus Acquisition
    ... the other part is where to locate said viruses not by ... Randem Systems ... Find whatever virus or other malware you want to infect the computer with. ...
    (microsoft.public.windowsxp.general)